Time based grouping behaviour clarification

Hi guys,

I want to clarify on how time based alert grouping is working:

If we have a 30 mins time grouping, does that mean that ALL alerts generated 30 minutes after an incident creation are going to be added to the same incident ?

Does that mean that we can miss an incident that is not related to an incident that was already created ?

Thanks,
Evgeniy

Hi @EvgeniyKulyk, yes that is correct - with this setting, all alerts coming into that service in the 30 minutes following the first alert would be grouped into the same incident. Here are our docs on this feature:

This feature is not intended for all use cases. If you have different types of alerts coming into the same service, I would recommend looking into using our intelligent alert grouping feature instead.

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.